HEALUX
Privacy Policy
Last updated: 14 July 2026
At HEALUX, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book a session or use our services.
This Privacy Policy complies with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Belgian Data Protection Act of 30 July 2018, and other applicable Belgian and European privacy legislation.
1. Data Controller
HEALUX is operated by:
MJHB Consulting SRL
Rue Marconi 23, 1190 Forest. Belgium
Email: hello@healux.be
Website: www.healux.be
MJHB Consulting SRL is the Data Controller responsible for the processing of your personal data.
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at hello@healux.be.
2. Personal Data We Collect
Depending on your interaction with HEALUX, we may collect the following categories of personal data:
Identification data
* Full name
* Date of birth (where required)
* Gender (if voluntarily provided)
Contact details
* Email address
* Telephone number
* Postal address (where required)
Booking information
* Appointment history
* Session preferences
* Purchased packages or memberships
* Gift card information
Payment information
Payments are processed through secure third-party payment providers.
HEALUX does not store your full payment card details.
Health information
Where necessary for your safety, we may collect health information including:
* medical conditions
* contraindications
* medications
* pregnancy status
* relevant health declarations
Health information is collected solely to assess the safe use of infrared sauna therapy.
Website information
When you visit our website we may automatically collect:
* IP address
* browser type
* device information
* pages visited
* cookies and analytics information
3. Why We Process Your Data
We process your personal data for the following purposes:
* managing bookings and appointments;
* providing our wellness services;
* ensuring the safe use of our facilities;
* processing payments and invoices;
* communicating regarding appointments;
* responding to enquiries;
* administering memberships and packages;
* complying with legal, accounting and tax obligations;
* improving our website and services;
* protecting our legal rights where necessary.
We do not use your personal data for automated decision-making or profiling.
4. Legal Basis for Processing
Depending on the purpose, we process your personal data on one or more of the following legal grounds:
* performance of a contract (Article 6(1)(b) GDPR);
* compliance with legal obligations (Article 6(1)(c));
* legitimate interests (Article 6(1)(f));
* your explicit consent where required (Article 6(1)(a) and Article 9(2)(a) for health data).
You may withdraw your consent at any time where processing relies on consent.
Withdrawal does not affect processing carried out before consent was withdrawn.
5. Health Information
Health information constitutes a special category of personal data under the GDPR.
HEALUX processes this information only:
* with your explicit consent;
* for your health and safety during infrared sauna sessions;
* to determine whether contraindications exist;
* to comply with legal obligations where applicable.
Health information is treated as strictly confidential and is accessible only to authorised personnel who require it for these purposes.
6. Marketing Communications
If you choose to subscribe to our newsletter or promotional communications, we may send you updates regarding:
* new services;
* events;
* wellness information;
* promotions;
* offers.
You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.
7. Data Sharing
HEALUX never sells your personal data.
Your personal information may be shared only where necessary with trusted service providers including:
* booking software providers;
* payment processors;
* accounting providers;
* website hosting providers;
* IT service providers;
* legal or regulatory authorities where legally required.
All processors are required to process your data in accordance with GDPR.
8. International Data Transfers
Some of our service providers may process data outside the European Economic Area (EEA).
Where this occurs, HEALUX ensures that appropriate safeguards are implemented, including where applicable:
* European Commission Standard Contractual Clauses;
* adequacy decisions;
* other safeguards recognised under GDPR.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy or as required by Belgian law.
Typical retention periods include:
* accounting and invoicing records: 7 years (or longer if legally required);
* booking records: for the duration necessary to manage our relationship with you;
* health declarations: only for as long as reasonably necessary for safety and legal purposes;
* marketing preferences: until consent is withdrawn.
When retention is no longer necessary, personal data is securely deleted or anonymised.
10. Your Rights
Under the GDPR, you have the right to:
* access your personal data;
* correct inaccurate data;
* request deletion (“right to be forgotten”);
* restrict processing;
* object to processing;
* receive your data in a portable format where applicable;
* withdraw consent at any time;
* lodge a complaint with the competent supervisory authority.
Requests may be sent to:
We will respond within the time limits established by applicable law.
11. Belgian Data Protection Authority
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with:
Autorité de protection des données / Gegevensbeschermingsautoriteit (APD/GBA)
Rue de la Presse 35
1000 Brussels
Belgium
https://www.dataprotectionauthority.be
12. Data Security
HEALUX implements appropriate technical and organisational measures designed to protect personal data against:
* accidental loss;
* unauthorised access;
* unlawful processing;
* disclosure;
* destruction;
* alteration.
While no system can guarantee absolute security, we continuously strive to protect your information using industry-standard practices.
13. Cookies
Our website uses cookies and similar technologies to:
* ensure proper website functionality;
* improve website performance;
* analyse visitor behaviour;
* remember user preferences.
Where legally required, we obtain your consent before placing non-essential cookies.
Further information is available in our Cookie Policy.
14. Third-Party Websites
Our website may contain links to third-party websites.
HEALUX is not responsible for the privacy practices or content of external websites.
We encourage you to review their respective privacy policies.
15. Changes to this Privacy Policy
HEALUX may update this Privacy Policy from time to time to reflect changes in legislation, our services or our business operations.
The most recent version will always be published on www.healux.be.
Continued use of our services after publication of an updated Privacy Policy constitutes acknowledgement of the revised Policy.